Open c0d3G33k opened 6 years ago
Hi, I have found a stored XSS vulnerability.
Affected Version: 3.0.4 or before
Affected URL: http:///monstra/
Payload
"><img src=x onerror=prompt(1)>
Steps to replicate:
Impacts:
A user with editor level privileges can make JavaScript code execution in admin's session.
Testing Environment:
Mitigation: Pass user input from below mentioned function
function test_input($data) { $data = trim($data); $data = stripslashes($data); $data = htmlspecialchars($data); return $data; }
Hi, I have found a stored XSS vulnerability.
Affected Version: 3.0.4 or before
Affected URL: http:///monstra/
Payload
Steps to replicate:
Impacts:
A user with editor level privileges can make JavaScript code execution in admin's session.
Testing Environment:
Mitigation: Pass user input from below mentioned function